Read the docs

WebReflection

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

WebReflection records in CISA KEV

No WebReflection vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Flatted · all components

TI-2026-25647 CVE-2026-33228 · GHSA-rf6f-7fwh-wjgh

flatted: Prototype Pollution via parse()

Priority HIGH 80

flatted is a circular JSON parser.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00856 Published 2026-03-20 Partial fix · 3.4.2 CWE-1321
Open these records in search →